Static task
static1
Behavioral task
behavioral1
Sample
60221014ce555b38bf9dcc5dbc2988de_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
60221014ce555b38bf9dcc5dbc2988de_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60221014ce555b38bf9dcc5dbc2988de_JaffaCakes118
-
Size
60KB
-
MD5
60221014ce555b38bf9dcc5dbc2988de
-
SHA1
2c26459e7ac7fa8f72180e384506b5e5e9c49f13
-
SHA256
c19e1b1046dc69bb3161a5aa73e1ac0fd7159a8c40164bb273ff6c61708414ff
-
SHA512
1c8e72190e1d157431211533731b7c43b6f610943a516485d05588bbf5b21c53c0ef375e0907d77e70f1afed2a5e1ecb40c51e49b187a44043c4dec83f318f9b
-
SSDEEP
768:VEuWqaO3E/e8jooZZ2rsO1Cs0WNKp6yqz:quWk3OCrsM3Kp6yqz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60221014ce555b38bf9dcc5dbc2988de_JaffaCakes118
Files
-
60221014ce555b38bf9dcc5dbc2988de_JaffaCakes118.exe windows:4 windows x86 arch:x86
ad88499834907d9bd7804c0c47f08b59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageA
GetLastError
GetVersionExA
LocalFree
SetLastError
GetWindowsDirectoryA
GetStdHandle
GetCurrentProcess
UnhandledExceptionFilter
LoadLibraryA
GetProcAddress
IsBadReadPtr
SetUnhandledExceptionFilter
GetLocalTime
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
lstrlenA
GetFileType
CreateFileA
HeapFree
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
TerminateProcess
VirtualFree
IsBadCodePtr
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
IsBadWritePtr
FlushFileBuffers
SetStdHandle
SetEndOfFile
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
setupapi
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdA
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE